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CENTRALIZED ELECTRONIC SAFE AND 
ACCOUNTING CONTROL SYSTEM 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 
5 The present invention relates to electronic lock and money control 

systems such as used by merchants to collect and dispense money during business 
operation, and more particularly to a system capable of stand alone operation as 
well as expanded networking and control of multiple electronic lock and money 
collection/dispensing units. 

10 2. Background Art 

Generally, because merchants tend to maintain only a minimal 
amount of money in cash registers, accumulated money /cash is periodically 
transferred to a on-site safe or drop box. This reduces the amount of money present 
at a cash register and potential exposure to loss do to robbery. Some safes include 

15 electronic money verification-and change dispensing units which allow the safes to 
not only receive money, but to provide some form of automation for dispensing 
money as well as making change. As a result, money can be exchanged for smaller, 
denominations and coins, or deposited for security and accounting. 

In the case of large business establishments, numerous safe units may 
20 be located at various locations throughout the store. Unfortunately, management, 
accounting, and oversight/maintenance of each machine requires long and tedious 
efforts. In addition, integration of additional units into an existing business 
generally requires a large expenditure to replace existing units for more 
sophisticated units. As a result, a need exists for an electronic lock and money 
25 control system and corresponding system units capable of cost effectively 
integrating additional system units, as well as provide more efficient system 
management and accounting operations to improve overall safekeeping, receiving, 
dispensing and accounting of money within the system. 
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SUMMARY OF THE INVENTION 
Therefore, it is an object of the present invention to provide an 
electronic lock and money control system capable of single unit stand-alone 
operation, as well as expandability to a network of multiple units having one of the 
5 units operate as a centralized network controller. 

In accordance with this and other objects, the present invention 
provides an electronic lock and money control system having at least one safe that 
includes a housing having an interior compartment for securing money, and an outer 
door having an electronic lock mechanism to control access to the interior 

10 compartment. The safe also includes a data input device, an electronic display, a 
connector interface mounted to the housing, and a control system arranged to 
communicate with the data input device, electronic display, connector interface and 
electronic lock. The control system includes a processor programmed to control 
operation of the electronic lock mechanism, as well as operate as a central system 

15 controller when connected to at least one other remote safe via the connector 
interface to monitor and accumulate financial and operational information for each 
remote unit. 

In accordance with one aspect of the present invention, the processor 
can be programmed to recognize different levels of system authority. The at least 
20 one safe can further include a bill validator apparatus mounted to the housing for 
receiving and validating bills of various denominations, and a storage device located 
within the safe for storing all validated bills. The processor is programmed to 
maintain a record of all received and validated bills. 

In accordance with another aspect of the present invention, the at 
25 least one safe can include a cash dispensing apparatus mounted to the housing. The 
cash dispensing apparatus includes a set of openings in the housing arranged to be 
loaded with containers each containing money of a predetermined value, and a 
separate opening and dispensing tray in the housing to dispense cash containers for 
removal from the safe. 
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Still further, the at least one safe can be connected to at least one 
remote safe unit via the connector interface. Remote safes can include bill 
validators and/or cash dispensing apparatus. In each case, the central processor is 
programmed to maintain a record of all money received and dispensed by each of 
5 the remote safes. The central processor can be further programmed to accumulate 
and track deposits and withdrawals of money, recognize user identification data, and 
store transaction data and associated user identity data in a memory for each remote 
unit. The processor can then process and sort stored transaction and operational 
data to generate an individual and totaled audit and accounting reports. 

^ 10 In accordance with yet another aspect of the present invention, a 

?S network of interconnected electronic locking and money control devices is provided 

jt§ having a central processing system integrated with one of the electronic locking and 

money control devices and arranged to control operation of the integrated device, 
!=* wherein the central processing system is connected to all other network devices, and 

■ ~ 15 further arranged to communicate with all the other network devices and provide 

y network control of all the other devices. 

;5 These and other objects, features, and advantages of the present 

invention will be readily apparent from the following detailed description of the best 
mode for carrying out the invention when taken in connection with the 
20 accompanying drawings. 



BRIEF DESCRIPTION OF THE DRAWINGS 



FIGURE 1 is a block circuit diagram of a safe/central network 
control unit in accordance with a first embodiment; 

FIGURE 2 is a front view of multiple wiring/connector interface 
25 panels connected together in a network; 

FIGURE 3 is a front view of a safe in accordance with the first 
embodiment of the present invention; 
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FIGURE 4 is a front view of a safe in accordance with a second 
embodiment of the present invention; 

FIGURE 5 is a block circuit diagram of a safe/central network 
control unit in accordance with the second embodiment; 
5 FIGURE 6 is a front view of a safe in accordance with a third 

embodiment of the present invention; 

FIGURE 7 is a block circuit diagram of a safe/central network 
control unit in accordance with the third embodiment; 

FIGURE 8 is a block circuit diagram of a safe/central network 
10 control unit having a remote keypad module in accordance with the present 
invention; 

=y FIGURE 9 is a block circuit diagram of a remote/slave safe unit 

j5y having a bill validator; 

^ FIGURE 10 is a block circuit diagram of a remote/slave safe unit 

15 having a vend mechanism; and 
; - FIGURE 1 1 is a front view of an exemplary embodiment of a display 

□ and keypad module. 

;£ DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT(S) 

\1 The present invention provides a stand alone electronic lock and 

20 money collection/dispensing unit, i.e., safe, that can also operate as a centralized 

network control unit when coupled to one or more remote electronic lock and 

money collection/dispensing units. 

Figure 1 illustrates a block circuit diagram of a safe/central network 
control unit 10 in accordance with a first embodiment. A control system includes 

25 a CPU 12 programmed to control operation of safe 10. CPU 12 also operates as 
a central network controller when interfaced with one or more remote/slave units 
and their associated components and keypads via a data bus. An interface module 
14 connects the CPU to a keypad and electronic display device 16, an outer door 
lock mechanism 18, and an inner door lock mechanism 20. The CPU and its 

30 interface module are preferably mounted behind a protected inner door within the 
unit. 
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A wiring/connector interface panel 22 is provided on the housing of 
the electronic lock and money collection/dispensing unit. In an exemplary 
embodiment, an alarm cable 24 can be feed through an opening 26 in the interface 
panel to provide connection to an external alarm system (not shown). A safe power 
5 connector 28 is provided to allow connection to an external switch-mode type power 
supply (not shown) arranged to produce voltages required by the display and other 
internal electronics of safe 10. An auxiliary power connection 30 can be provided 
for any devices such as a bill validator (described below) that require an additional 
power supply. A modem connection 32, such as a standard RJ-45 port, allows 
10 connection to a conventional external modem such as for remote diagnostics and/or 
1^ network monitoring and reporting. Other standard cable connectors can be used. 

*0 A printer connection 34, such as a standard RJ-45 port, is used to connect a printer 

iij to the electronic lock and money collection/dispensing unit. Finally, a DATA 1 

•t| port 36 and DATA 2 port 38 are provided to allow connection to other remote/slave 

!^ 15 electronic lock and money collection/dispensing units. More specifically, as shown 

) s ~ in Figure 2, the DATA 1 and DATA 2 ports are used to connect (in a daisy chain 

^ configuration) the central controller unit 10 to multiple remote units 40, including 

□ any associated electronic locks, validators, and dispensing systems. These remote 

:t units operate as slave units within the network. 

20 The locking system hardware depends on the type of door. For 

example, inner doors can use basic spring-loaded knob locks. When an operator 
unlocks an inner door, the control system sends a control signal to a lock 
mechanism solenoid. Once the lock solenoid is energized, the knob can be turned 
to unlatch and open the door. 



25 An outer door provides the first line of physical security. An inner 

door is any door that cannot physically be opened unless an outer door is first 
opened. The use of one or more inner doors allows general access to the safe for 
getting tills, change, and so forth while allowing larger deposit funds or valuables 
to remain secured behind an inner door. Instead of a knob, an outer door can utilize 

30 a handle controlled by energizing of a lock solenoid to allow the handle to be 
turned. Linkage connected to the handle retracts one or more lock bolts. Once 
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retracted, the bolt(s) are held back by a detent allowing the door to be opened. 
When the door shuts, the bolts can be automatically re-engaged. The lock solenoid 
is de-energized to prevent the boltwork from retracting when attempting to turn the 
handle. 

5 The lock mechanism (not shown) only responds to commands and 

replies to instructions from the control processor. A lock mechanism in a remote 
safe can be set-up to respond only to the central control unit. The lock is arranged 
to store basic data including an encrypted identification number, a list of the most 
recent log entries, and associated setup properties. 

10 Door sensors (not shown) mounted in the lock and on the outer door 

sense door status and provide appropriate signaling to the control processor. Thus, 
if a door remains open too long, an alarm can be triggered by the control processor. 
The door sensors can signal the control processor to trigger a burglary alarm signal 
if a door is sensed as being opened without prior signaling from the control 

15 processor. 



Money is placed behind a lock by making a drop. When cash is 
dropped, the user making the drop is credited for the money added to the system. 
Money is later removed from the system by opening the door in front of the cash. 
For example, if a Shift Supervisor makes a $200 manual drop to an inner 
20 compartment, a corresponding credit is logged. When money is removed such as 
for making a bank deposit, the person credited with opening the door is also 
credited with the withdrawal from the system. 

Figure 3 provides a front view of an exemplary unit in accordance 
with the first embodiment of the present invention. More specifically, a manual 
25 drop drawer 50 includes an opening to facilitate manual dropping of money /cash by 
allowing an envelope having the money and a drop receipt therein to be inserted into 
the electronic lock and money collection/dispensing unit. The drawer can be 
arranged to prevent extracting cash back through the opening after it is dropped 
inside. An outer door 52 is provided for example from 1/2 inch A-36 steel and 
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equipped with a high quality boltwork for optimum security and efficiency in 
operation. An "L" style handle 54 turns 90° right (clockwise) to open the door. 
When the handle is turned, the bolts retract and the lock opens. When the door 
shuts, a spring loaded detent mechanism fires the bolts to lock the door. The handle 
5 automatically returns to the locked position. A keypad and display module 56 is 
shown mounted to the outside of housing. An inner compartment 58 is denoted in 
dashed outline to indicate an approximate location. This compartment is used to 
hold manual drops, and is protected by its own inner door and lock mechanism. 

Another exemplary embodiment is shown in Figure 4. The 
10 associated block circuit diagram is shown in Figure 5. In this embodiment, the 
electronic lock and money collection/dispensing unit 10 is equipped with a money 
dispensing/ vending mechanism assembly 60. Like elements to those described 
above have been denoted with like reference numbers. More specifically, the 
housing, such as outer door 52, includes a set of round openings 62, i.e., "columns" 
15 or "chutes," formed therein to receive money-filled tubes to facilitate loading of 
tubes into the dispensing/vending mechanism. The chutes are individually 
numbered for system identification. Vended tubes drop out to a dispensary capture 
tray 64 located in the housing or outer door. The vending mechanism can be 
mounted on the inside surface of the housing or outer door, and include a series of 
20 optical sensors that track tube status, and a set of motors that control operation of 
tube vending baffles. The nature of the baffles prevents unauthorized access to the 
tubes from the opening in the housing created by the dispensary capture tray. The 
vending mechanism includes electronics coupled to interface module 14 and outer 
door lock 18. 

25 Tubes are assumed to hold a certain amount of money based on the 

column in which they are loaded. For example, column 1 may be setup to hold 
rolls of pennies in its tubes. Each penny roll is standardized, such as to a value of 
$0.50. Therefore, each tube is accounted for at $0.50 each. Likewise, column 2 
can be setup to hold tubes of nickels standardized at $2.00 each, and so on for the 

30 remaining columns. In this manner, the system can track in real-time the loading 
and vending of tubes, as well as report the credits, debits, and cash on hand based 



-7- 



FIRE 01 11 



PUS 



on the number of tubes added to or removed from each column of a particular 
dispensing unit. 

A key switch 66, such as a Medeco® keys witch, can be provided to 
control operation of a tubelock (not shown). The tubelock itself is a moveable bar 
5 that blocks the chute openings at the exterior surface of the door. When the 
tubelock is locked, tubes (and debris) cannot be loaded through the chutes. Such 
an arrangement prevents unauthorized loading as well as any attempts to extract a 
tube out through the chutes. 

Still another exemplary embodiment is shown in Figure 6. The 
10 associated block circuit diagram is shown in Figure 7. In this embodiment, one or 
more bill validators 68 are located on the unit. Each bill validator 68 includes an 
opening for insertion of paper currency, and a removable storage cassette (not 
shown) mounted internally for storage of bills that pass through the validator. Bill 
validation provides a secure and accurate method of collecting and storing incoming 
15 cash throughout the day. An operator enables a bill acceptor from the control panel 
and inserts one or more bills. The keypad/display control panel can be mounted to 
the exterior of the unit housing, or remotely as shown in Figure 8 for convenient 
positioning such as on a counter near a cash register. The bill validator is arranged 
with appropriate hardware and programing to draw in the bill, validate the bill for 
20 authenticity and denomination, stack the bill in its cassette, and count the number 
and type of bills. The CPU stores the data into memory. A validator can be 
mounted to the housing such as via bracket assemblies located behind an outer 
and/or inner door. 

A Universal Interface Board (UIB) 70 is used to interface each 
25 validator's electronics with the interface module 14. A UIB is arranged to respond 
to commands and replies to instructions from the device processor. The primary 
purpose of the UIB is to format data communicated between the validator and the 
CPU. The UIB stores basic data including an encrypted identification number, a 
list of the most recent audit trail entries, its own name, and associated setup 
30 properties. 
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A UIB can serve as a device processor. A lock control processor can 
also operate as a device processor. As shown, if more than one validator is used, 
each validator has its own UIB. One is made the master and connects directly to 
the main data bus, while the second UIB connects to the master UIB via an auxiliary 
5 data bus. One or more lock mechanisms can be coupled to communicate with the 
master UIB which, in turn, communicates with the system controller. 

As is demonstrated by the different embodiments, the present 
invention provides a very flexible system capable of custom configuration because 
the electronic lock and money collection/dispensing unit(s) can be arranged based 
_ 10 on a desired configuration. For example, some applications may require an 

iO electronic lock and money collection/dispensing unit to perform advanced auditing 

zT t capability, but do not require bill validation or dispensing capability. For those 

^ applications, the first embodiment is best suited. As shown in Figures 9 and 10, 

Q remote system units, i.e., units without a CPU/local control system, can be 

iy 15 configured with bill validator(s) 68 and associated UIB(s) 70 and/or vend 

□ mechanisms 60. Such remote units and their associated components operate under 

1=3 control of the central control unit CPU. 

Each device and/or component circuit board is provided with a 
unique serial number. The central controller is arranged to detect the presence of 
20 a device or component on the network probing serial numbers to identify those that 
are on the network. Following identification of the serial numbers, the device types 
are requested and network addresses are assigned to each serial number. Following 
this, each device is locked down with a CPU serial number and security tokens 
known only to the central controller and the device. 

25 A device is added to the network by the central controller 

broadcasting a polling type message to determine if there are any devices coupled 
to the network that are not registered with the central controller. Any device that 
responses is then queried as to its type and any sub-components. The network 
information is then updated accordingly to add the device or component to the 

30 network. 
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An exemplary embodiment of a display and keypad module 16 is 
shown in Figure 11. A set of buttons 72 are provided for scrolling through display 
options. The top scroll button scrolls up through a pick list or to the right if a line 
on the screen exceeds 20 characters, and the lower scroll button scrolls down or to 
5 the left. A fluorescent, LCD, or other suitable type of display 74 is provided. 

A set of selection buttons 76 are provided, such as one for each row 
of the display, to allow a user to enter desired selections. A numeric keypad 78, 
including function keys such as an enter and clear key, is also provided. A key port 
(=s 80 is provided to allow insertion and reading of electronic keys. Such an 

kQ 10 arrangement limits access to the system to authorized individuals. 

IH A set of action buttons 82 are provided depending on the application. 

Q For example, a LOAD button is used when loading tubes to the dispensing system; 

lu a VEND button is used to dispense change tubes from the dispensing system; a 

□ DROP button is used when making manual or validator drops; an UNLOAD button 

X 15 is used to empty all tubes from a column for maintenance; a DOORS button is used 

*P when opening safe doors; a BUY CHANGE button is used when purchasing change 

U from the dispensing unit by making a drop to a validator; a DISPLAY button is 

used to check system information such as time and date, various delays that may be 
in progress, and obtain general system information including technical support 
20 contact information; a PRGM (program) button is used to enroll or modify users, 
or to edit system setup parameters; a DROP SET button is used to setup drop 
operations; an ESC button allows the operator back up a full step at almost any 
point in almost any procedure, and also allows positive user completion of certain 
activities such as loading tubes or making validator drops; and a HELP button 
25 allows assistance information to be displayed. 

As noted above, a safe may be configured to allow manual drops. 
Manual drops are made by inserting an envelope of money into a safe using a drop 
drawer. If the safe is not equipped with a validator, this is the only way (for 
accounting purposes) to put cash into the safe. The drop drawer is arranged to 
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prevent extraction of the money back through the drawer opening once it has been 
closed and the drop completed. The drop drawer can also be equipped with an 
electronically controlled lock for additional security. 

The central control unit is arranged through suitable programming 
5 to track and report the complete history of each unit in the system. In other words, 
all operations performed are recorded with a transaction number, time stamp, 
identifier of the person performing the action, and the details of the event, and 
communicated to the central control unit. For example, a unit will record the 
identity of the person who opens a safe door, when the door was opened, how long 
10 it remained open, and whether that user chose to remove any available cash from 
behind that door. This information is then sent to the central control unit. 



The central control unit's CPU is programmed to generate various 
reports for printing or display. More specifically, financial reports can include 
individual user reports, cash (on hand), and end day reports. The system allows 

15 any user or operator, regardless of report permission, to view or print their own 
user report for a particular shift. Cash reports show actual cash present in the 
system by location. For example, money is reported per validator, per manual drop 
compartment, and per column of each dispensing unit. An audit report can be 
generated to show every event in the system during a specific time period. All 

20 financial data is derived from the audit. The audit can also be used to track 
personnel activity, such as the identity and time associated with a person logging 
into a particular featrue. This sort of data is useful not only for theft detection and 
deterrence, but also for tracking operational trends. An audit data reported may be 
limited to a single user, system device, or event type for a given period. 

25 As noted above, the central control unit is arranged to collect and 

sort information to provide reports detailing network or individual user activity. 
The central control unit can also be programmed to conduct a set of device and 
system self diagnostic routines to provide a status report regarding operation of 
hardware, communication, and alarm components. 
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As an example, a user report can be generated to print or view 
information such as: (1) a list of all bills validated by denomination (if any 
validators exist in the system) as well as all doors opened (including the number of 
times opened) by a user; (2) a list of all cash locations in the system and the amount 
5 of money dropped into each by the user as well as all vend assemblies in the system 
and the amount of money loaded into each by the user; (3) a list of all cash locations 
in the system and the amount of money removed from each by the user; (4) a total 
of all transactions associated with the user including money added to all manual 
drops and validator drops, cash removed from drops, and total taken from vend 
10 (vend or unload), as well as a net total for the user. 

3 An end day report includes a series of operator reports (one for each 

•jjj operator in the system who was active during the business day), and a copy of a 

Lq cash report. The end day report also includes a net activity section that lists bills 

il validated by denomination (if any validators exist in the system) and lists all doors 

HJ 15 and how many times each were opened. A net totals section lists total money added 

□ to all manual drops and validator drops, lists total deposits (cash removed from 

;|r drops) and total taken from vend (vend or unload), and lists the net total for the 

4= user. 

A cash report includes a vend section that shows the total number of 
20 tubes and the amount of money in each column per vend assembly, as well as the 
total of all vends. A validator drop cash section shows the amount of money in 
each validator by validator name, as well as the total amount of validated money. 
A manual drop cash section shows the amount of money in each manual drop 
location, as well as the total money in manual drops. A total money in system 
25 section shows the combined sum of moneys in vend, validated drops, and manual 
drops. 

An audit report includes a report data section showing the report start 
and end time/date, device, user, and event report criteria. The report itemizes all 
events at each unit by identifying the event, the location, and the user triggering the 
30 event. In other words, the audit report can provide an activity recap for each unit 
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in the system by accumulating financial information such as the amount of money 
loaded, unloaded (showing a total overage or shortage, if applicable), vended, 
manually dropped, and dropped to validators, as well as security information such 
as the number of times doors were opened. In addition, events such as an attempt 
5 to log into the system using an incorrect PIN are reported and tracked. The system 
can be programmed to determine if the next entry after such an incorrect attempt is 
valid, and assume accordingly that the user simply made a mistake when originally 
entering the PIN. 

A configuration report provides an exhaustive list of system devices, 
10 all components of each device, and all variables of each component. A system 
report can be generated to track messages that are initiated by the system instead of 
the user. For example, a report can be generated detailing detection of a bill jam 
in a particular validator device, including subsequent repair activity performed such 
as power-up and power-down cycling. 

15 All user data, such as identification, identification type (User Number 

or electronic key), name, and user permissions, is stored in the system and may be 
printed or displayed. System configuration information such as device arrangement 
and communication setup, column values, delays, timelocks, is included on a 
configuration report. If the integrity of the system or any of its components is in 

20 question, a diagnostic status report is available. This report lists all components and 
their operational status. A system report is also available to list all system messages 
(errors) generated and logged during the report period. This report is a very 
effective way of monitoring the system for full validators, bill jams, or other system 
generated audit entries. 

25 Users may be added with any combination of authority and any type 

of available identifier. A system identifier is required, and may be in the form of 
a user number, electronic key, or other suitable arrangement. For example, a 
Biometrics® fingerprint reader can be installed to provide recognition of an index 
finger for identification. The purpose of an identifier is to provide the system with 

30 a way to determine who is accessing it. Once identified, the system can determine 
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what permissions have been assigned to that user, as well as the activity history of 
that person. A name and personal ID are stored in the system and referenced to the 
identifier. Thus, when a user logs-in, the system can identify the user by name on 
the display as well as on any printed or displayed reports. 

5 Identifiers are verified by a PIN, which is associated with a user upon 

enrollment into the system. One exception is an armored car identifier, which 
preferably uses verification from a second enrolled user instead of a PIN associated 
with the armored car personnel. Users may change their own PIN numbers at will, 
or as required by the system. 

J 10 Enrollment involves entering a user's identifier, personal ID (such 

K; as a social security number), temporary PIN, name, and default permission level. 

|H Once enrolled, the user's PIN and permission levels may later be modified. The 

jjf name and personal ID cannot be changed. To associate a different personal ID or 

iU name with an identifier, the user (identifier) must be deleted from the system and 

Q 15 enrolled again as a new user. 

<p A user may become inactive by one of two methods. An authorized 

£ user can inactivate a person to disable their access without actually removing them 

from the system. This can be done for example to a user who is on vacation or 
temporarily transferred. The second method is automatic inactivation. This occurs 
20 when the system does not detect a user accessing the system or safe for a 
predetermined amount of time, such as one or two months. Once a user becomes 
inactive, an authorized user may allow the user to become active again by assigning 
a temporary PIN. Note that a temporary PIN may be issued to a user even if they 
are already active. 

25 In further accordance with the present invention, the central control 

unit is programmed to recognize different levels authority or permission to access 
different operations of the system. Nearly all system operations require the user to 
have a certain level of permission. For example, common tasks such as making 
drops or vending change is usually granted to the majority of users, while certain 
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doors may be off-limits to all but a few users. Individuals are assigned a default 
permission level when they are enrolled. Electronic keys may be pre-coded with 
specific permissions, or may be set to operate using a system default permission 
level. Permission defaults as well as individual user permissions may be modified. 
5 A user cannot enroll other users with a higher default permission level than their 
own. In addition, a permission level can be assigned as a function of the time or 
date, i.e., the permission is valid only during the assigned time or date. 

In one embodiment, the system recognizes the following default 
permission levels. The first level is a door permission. Users with a general door 
10 permission may open any door belonging to an access group to which they have ac- 
cess. Any door may be assigned to any of 32 access groups. A user will have 
access to specific groups and the doors assigned thereto. In situations where dual 
access is provided, or verifying armored car override access, the secondary user 
still must have door access. 

15 The second permission level is a vend permission, which is similar 

to door permission in that the same 32 access groups can be used. Every column 
on every system dispensing unit is assigned a group number. For a user to vend a 
column, the user must have general vend permission and access to the group 
assigned to that column. Load and unload functions, also related to the dispensing 

20 system, are globally allowed or disallowed by permission, without regard to group 
number. 

The third permission level is a drop permission. Users need general 
drop permission in order to make drops, whether by validator or manual drop. In 
addition, drop permission is required in order to access the Buy Change and any 
25 other related drop functions. 

The next level of permission is a run report permission. While all 
enrolled users may run their own operator reports, running any other report requires 
the applicable report permission. The reason for specifying particular report 
permissions for particular users is to allow certain people to run some reports, such 
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as an end day report, without being able to access other reports such as an audit 
report. Users who load or unload dispensing systems need to be able to run a cash 
report, but may not have any need to run an enrolled user report, and so forth. 

Another level of permission allows a user to adjust the system or unit 
clock by one or two minutes. Setting the system's clock (time, date, and DST) can 
be controlled by a separate, advanced permission. 

User functions require a permission level to allow a user to enroll us- 
ers, edit users, set user permissions, and edit system level user functions. 
Additional user parameters may be set by advanced users, such as adding or editing 
default permissions, setting PIN length and life, and setting auto delete and auto 
inactivate times. 

The following permissions can be generally restricted to loss 
prevention or security manager level personnel: 
User Related: 

Set Default Permissions 
Set PIN Length 
Set PIN Life 
Set Auto Delete Time 
Set Auto Inactivate Time 
Access Related: 

Set Lock Delays 
Set Lock Timelocks 
Set Lock Access Time 
Set Lock Alarm Time 
Set Vend Delay 
Set Variable Vend Delay 
Set Vend Timelock 
Set Unload Delay 
Set Unload Timelock 
Set Dual Key 
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Accounting Related: 

Set Cash 

Set Column Values & Levels 
Set Receipt Printing 
Set Validator Acceptance Direction 
Set Validator Acceptance Denominations 
Set Auto End Day Time 
Set Variable Vend Time 

Clock Related: 

Time 
Date 

Auto Daylight Savings Enable 
System Related: 

Device Names 
Delete Device 
Set Idle Text 

Set Modem Configuration 
Set Remote Configuration. 

Factory level permissions are provided for the following advanced 
20 system functions: 

Master Reset Add Device 

Set Serial Number Set Company Code Set Key Required . 
Set Fingerprint Required Set Lock Behind Set Lock Sensors Set 
Solenoid Time 

25 Set Remote Solenoid Actuate Button. 

While embodiments of the invention have been illustrated and 
described, it is not intended that these embodiments illustrate and describe all 
possible forms of the invention. Rather, the words used in the specification are 
words of description rather than limitation, and it is understood that various changes 
30 may be made without departing from the spirit and scope of the invention. 
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